bodega-markets

Warn

Audited by Socket on Mar 22, 2026

1 alert found:

Security
SecurityMEDIUM
SKILL.md

SUSPICIOUS. The skill’s trading capabilities match its stated purpose, but it depends on an unverified operator and undocumented local scripts to perform financially consequential blockchain actions. The main risk is not clear malware evidence; it is the combination of unverifiable execution provenance and autonomous real-world trading capability.

Confidence: 85%Severity: 81%
Audit Metadata
Analyzed At
Mar 22, 2026, 01:22 AM
Package URL
pkg:socket/skills-sh/Flux-Point-Studios%2Fcardano-defi-skills%2Fbodega-markets%2F@6d21463b7e19ea5ea59b9e06225177f9dbfba902
Security Audit — socket — bodega-markets